Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3934353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232313a3934353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8z+d29rilL0/M7B0PgujemCP2NLu/hjDimeIhHy+5ic=
Subject key identifier:   22:0A:5D:C9:DE:67:65:83:50:47:37:F3:EA:4F:D0:9E:C1:A6:19:88
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0D74FD0F635E78862A970C8925F7967761E40090
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3934353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 21 Feb 2022 09:45:24 +0000
ROA not before:           Mon 21 Feb 2022 09:40:24 +0000
ROA not after:            Mon 20 Feb 2023 09:45:24 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:221:945::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:fd:0f:63:5e:78:86:2a:97:0c:89:25:f7:96:77:61:e4:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 21 09:40:24 2022 GMT
            Not After : Feb 20 09:45:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:7f:d9:37:7a:44:4b:76:ea:bf:f3:08:a5:
                    28:4b:c6:89:39:e0:24:47:a5:db:f7:b2:69:5e:36:
                    6c:39:0a:5a:fe:a8:ab:ca:85:d7:86:bd:1c:d9:5a:
                    71:a6:99:8d:3c:45:a2:fa:f6:72:3b:5c:8e:03:35:
                    53:c2:b8:c4:04:29:2e:c5:59:06:62:59:aa:72:73:
                    d6:e6:e1:8e:c2:79:61:ad:6b:d6:44:52:d7:4a:b0:
                    bc:cf:c3:3a:41:17:c2:3d:22:23:93:ff:2a:b7:8a:
                    e1:f7:dc:d6:9d:16:4a:9c:e4:ae:35:8b:4a:88:5e:
                    c4:b2:60:c6:42:a2:7a:27:cf:f6:32:f7:c0:75:eb:
                    5a:9e:85:46:71:0b:bf:14:72:41:96:02:35:7e:aa:
                    17:c6:af:49:e2:7a:21:14:2a:fd:c6:43:12:ad:1e:
                    49:0c:76:23:bb:e8:3c:e2:2c:3b:11:2b:d8:e5:e2:
                    eb:a4:45:64:74:4d:fe:58:69:f8:0b:cf:d8:99:d2:
                    4e:63:e1:38:45:26:d4:23:b3:c7:c7:e5:b4:0f:3e:
                    64:e7:8c:43:20:b5:1a:f1:73:9d:39:d6:00:dc:e2:
                    5c:e7:10:22:7e:24:55:42:be:9f:9b:06:0a:50:52:
                    bf:4d:92:d5:9a:78:c3:28:68:13:30:e9:d2:11:02:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:5D:C9:DE:67:65:83:50:47:37:F3:EA:4F:D0:9E:C1:A6:19:88
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232313a3934353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:221:945::/80

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:75:99:b6:cc:6e:ad:a2:75:20:df:43:a5:d2:c3:7c:56:
         b4:52:d6:47:5b:ae:30:cc:58:8d:df:ef:4f:11:e9:2d:0e:ca:
         01:6b:5f:c3:03:0f:34:90:23:09:59:c0:7c:d2:48:20:4c:02:
         ec:32:18:a6:fc:e5:c7:d5:fc:61:62:e1:d6:74:22:a6:93:8e:
         e4:59:cd:2a:fa:70:c7:5f:9d:95:0a:97:6d:b6:45:69:66:ef:
         93:f9:0c:d5:64:f7:a1:6f:34:ee:4f:c5:7d:98:cc:c7:9e:39:
         96:38:3d:79:dc:2d:b5:e8:aa:5c:88:96:12:fa:f1:46:21:8b:
         2e:cf:07:d8:2a:e5:65:04:d2:01:e9:e4:ae:dc:0f:35:4e:c6:
         b6:fb:25:04:fd:c0:48:ef:e6:88:42:d5:d0:41:22:95:be:c6:
         7c:da:5b:1f:13:08:2e:9d:df:01:ca:ab:51:97:00:48:0f:b5:
         44:41:dd:ec:b9:45:89:b7:ed:5b:b9:7e:05:26:4b:fb:40:ec:
         7e:af:09:41:d6:04:32:24:2b:11:33:a0:cc:e9:b9:82:75:6b:
         ce:f8:88:cc:ef:04:20:9d:08:dc:64:bc:2c:44:5e:43:56:47:
         8d:26:c0:c1:7e:8a:69:f2:39:e3:0c:38:e9:d3:aa:a9:e6:3e:
         88:22:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----